All looks normal to me. -DModSSL is always set for historical reasons.

(We used to have some servers with SSL only enabled on certain Apache processes. This is no longer the case, as the overhead of loading ModSSL is basically zero now, so it’s just turned on everywhere.)